[keycloak-dev] Authentication with Google Identity Tokens aka Better Android support

[Summers Pittman]

TL;DR; How do I shove this :
https://developers.google.com/identity/sign-in/web/backend-auth into
KeyCloak.

I've been reading up on how to extend the KeyCloak service and I want to
write a (SPI? module? extension?) that let's me sign into my server
services using a Google ID Token.  This will let me use the Google account
on my Android phone without ever having to open a web page.  In fact if I
only have one Google account on my phone I can automatically log my user
into my app without ever having to prompt them.

However, I'm not really sure where to start.  I've cloned the keycloak
repository and have been reviewing the code there and cross referencing
with the docs, but I think I need a little more "push" in the right
direction.

For reference, I've implemented this flow in both Node.js and Java before
without much trouble so I should be able to get a PoC up in an afternoon or
two once I know where to put the code.

 Node.js :
https://github.com/secondsun/FH-Google-mBaas-Auth/blob/master/lib/auth.js#L47
 Java :
https://github.com/secondsun/devnexus-site/blob/master/src/main/java/com/devnexus/ting/web/controller/AndroidLoginController.java#L100

Thanks,

Summers